Static group, that has 2 dynamic groups as members, used in decryption policy?

ccvega — Thu, 11 Feb 2021 15:46:01 GMT

I have a static group with 2 dynamic groups as its members, that is in turn used as the source object in a no-decrypt rule. I have discovered that this does not work; decrypt still happens. However If I use the dynamic groups directly as sources in the no-decrypt rule it works as expected. This same static group DOES work fine in the security policy, as a source for an outbound SSH rule.

Is this expected behavior perhaps?

We're on v9.0.9. Thanks!

Re: Static group, that has 2 dynamic groups as members, used in decryption policy?

OtakarKlier — Thu, 11 Feb 2021 22:05:01 GMT

Hello,

Not sure if its expected behavior. However in the past I have stayed away from nested groups as it has caused me many issues especially with Active Directory as well as other products.

Regards,

topic Static group, that has 2 dynamic groups as members, used in decryption policy? in General Topics

Static group, that has 2 dynamic groups as members, used in decryption policy?

Re: Static group, that has 2 dynamic groups as members, used in decryption policy?